Vulnerability Database

318,756

Total vulnerabilities in the database

CVE-2025-38386

In the Linux kernel, the following vulnerability has been resolved:

ACPICA: Refuse to evaluate a method if arguments are missing

As reported in [1], a platform firmware update that increased the number of method parameters and forgot to update a least one of its callers, caused ACPICA to crash due to use-after-free.

Since this a result of a clear AML issue that arguably cannot be fixed up by the interpreter (it cannot produce missing data out of thin air), address it by making ACPICA refuse to evaluate a method if the caller attempts to pass fewer arguments than expected to it.

  • Published: Jul 25, 2025
  • Updated: Dec 17, 2025
  • CVE: CVE-2025-38386
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel - 5.4.296
linux / linux_kernel 5.5 5.10.240
linux / linux_kernel 5.11 5.15.187
linux / linux_kernel 5.16 6.1.144
linux / linux_kernel 6.2 6.6.97
linux / linux_kernel 6.7 6.12.37
linux / linux_kernel 6.13 6.15.6
linux / linux_kernel 6.16-rc1 6.16-rc1.x
linux / linux_kernel 6.16-rc2 6.16-rc2.x
debian / debian_linux 11.0 11.0.x